output modes + custom headers support
started access control